@@ -45,6 +45,9 @@ function Verify-Assemblies
45
45
if ($signature.SignerCertificate.Subject -eq " CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ) {
46
46
Write-Log " Valid: $ ( $_.FullName ) "
47
47
}
48
+ elseif ($signature.SignerCertificate.Subject -eq " CN=Microsoft 3rd Party Application Component, O=Microsoft Corporation, L=Redmond, S=Washington, C=US" ) {
49
+ Write-Log " Valid (3rd Party): $ ( $_.FullName ) "
50
+ }
48
51
else {
49
52
# For legacy components, sign certificate is always "prod" signature. Skip such binaries.
50
53
if ($signature.SignerCertificate.Thumbprint -eq " 98ED99A67886D020C564923B7DF25E9AC019DF26" ) {
@@ -54,22 +57,30 @@ function Verify-Assemblies
54
57
elseif ($signature.SignerCertificate.Thumbprint -eq " 5EAD300DC7E4D637948ECB0ED829A072BD152E17" ) {
55
58
Write-Log " Valid (Prod Signed): $ ( $_.FullName ) ."
56
59
}
57
- # For some dlls e.g. "Interop.UIAutomationClient.dll", sign certificate is different signature. Skip such binaries.
60
+ # For some dlls e.g. "Interop.UIAutomationClient.dll", sign certificate is different signature. Skip such binaries.
58
61
elseif ($signature.SignerCertificate.Thumbprint -eq " 67B1757863E3EFF760EA9EBB02849AF07D3A8080" ) {
59
62
Write-Log " Valid (Prod Signed): $ ( $_.FullName ) ."
60
63
}
61
- # For some dlls e.g. "Microsoft.VisualStudio.ArchitectureTools.PEReader.dll", sign certificate is different signature. Skip such binaries.
64
+ # For some dlls e.g. "Microsoft.VisualStudio.ArchitectureTools.PEReader.dll", sign certificate is different signature. Skip such binaries.
62
65
elseif ($signature.SignerCertificate.Thumbprint -eq " 9DC17888B5CFAD98B3CB35C1994E96227F061675" ) {
63
66
Write-Log " Valid (Prod Signed): $ ( $_.FullName ) ."
64
67
}
65
- # For some dlls sign certificate is different signature. Skip such binaries.
68
+ # For some dlls sign certificate is different signature. Skip such binaries.
66
69
elseif ($signature.SignerCertificate.Thumbprint -eq " 62009AAABDAE749FD47D19150958329BF6FF4B34" ) {
67
70
Write-Log " Valid (Prod Signed): $ ( $_.FullName ) ."
68
71
}
69
72
# Microsoft 3rd Party Authenticode Signature
70
73
elseif ($signature.SignerCertificate.Thumbprint -eq " 899FA016DEE8E665FF2A315A1151C43FB96C430B" ) {
71
74
Write-Log " Valid (Prod Signed): $ ( $_.FullName ) ."
72
75
}
76
+ # Microsoft 3rd Party Application Component
77
+ elseif ($signature.SignerCertificate.Thumbprint -eq " 709133ECC53CBF386F4A5ECB782AEEF499F0F8CA" ) {
78
+ Write-Log " Valid (Prod Signed): $ ( $_.FullName ) ."
79
+ }
80
+ # Microsoft 3rd Party Application Component
81
+ elseif ($signature.SignerCertificate.Thumbprint -eq " 912357a68d29b8fe17168ef8c44d6830d1d42801" ) {
82
+ Write-Log " Valid (Prod Signed): $ ( $_.FullName ) ."
83
+ }
73
84
else {
74
85
Write-FailLog " Incorrect certificate. File: $ ( $_.FullName ) . Certificate: $ ( $signature.SignerCertificate.Thumbprint ) ."
75
86
}
@@ -99,12 +110,13 @@ function Verify-NugetPackages
99
110
Invoke-WebRequest https:// dist.nuget.org/ win- x86- commandline/ v4.6.1 / nuget.exe - OutFile $nugetInstallPath
100
111
}
101
112
102
- Write-Log " Using nuget.exe installed at $nugetInstallPath "
113
+ Write-Log " Using nuget.exe installed at $nugetInstallPath "
103
114
104
- $artifactsDirectory = Join-Path $env: TP_OUT_DIR $TPB_Configuration
115
+ $artifactsDirectory = Join-Path $env: TP_OUT_DIR $TPB_Configuration
105
116
$packagesDirectory = Join-Path $artifactsDirectory " packages"
117
+
106
118
Get-ChildItem - Filter * .nupkg $packagesDirectory | % {
107
- & $nugetInstallPath verify - signature - CertificateFingerprint 3F9001EA83C560D712C24CF213C3D312CB3BFF51EE89435D3430BD06B5D0EECE $_.FullName
119
+ & $nugetInstallPath verify - signature - CertificateFingerprint " 3F9001EA83C560D712C24CF213C3D312CB3BFF51EE89435D3430BD06B5D0EECE;AA12DA22A49BCE7D5C1AE64CC1F3D892F150DA76140F210ABD2CBFFCA2C18A27; " $_.FullName
108
120
}
109
121
110
122
Write-Log " Verify-NugetPackages: Complete"
@@ -130,4 +142,4 @@ function Write-FailLog ([string] $message)
130
142
}
131
143
132
144
Verify- Assemblies
133
- Verify- NugetPackages
145
+ Verify- NugetPackages
0 commit comments